Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File: ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier: UmHXezZxxrikzMUpbBck9jFFlpfK+zMJJd1el70m1x8=
Subject key identifier: AD:BC:20:36:2B:6C:45:87:EA:E6:83:A4:EA:FE:EE:68:91:26:08:7A
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer: /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial: 0194BABBB9F1EF0A754C0AD668A95E0B4F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 05:00:52 +0000
Manifest this update: Fri 31 Jan 2025 05:00:52 +0000
Manifest next update: Sat 01 Feb 2025 05:00:52 +0000
Files and hashes: 1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: dz55ekfNBKqHtOhV3mg54skZ+kxk4YUtOsnLTt7x0Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:b9:f1:ef:0a:75:4c:0a:d6:68:a9:5e:0b:4f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Validity
Not Before: Jan 31 05:00:52 2025 GMT
Not After : Feb 1 05:00:52 2025 GMT
Subject: CN=adbc20362b6c4587eae683a4eafeee689126087a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:e5:ab:18:7e:c4:19:c8:45:50:2f:b8:a0:
38:81:6e:43:f7:56:f2:9c:96:8e:ad:eb:44:a5:61:
17:27:dd:01:a7:4a:20:44:37:f9:b0:10:1a:7c:2a:
a3:4b:38:5d:67:02:3a:4c:f7:c5:28:e9:a8:aa:49:
0f:c5:9e:5e:e6:9e:70:22:c0:b4:a0:b8:26:f3:ef:
d7:24:12:a7:cd:47:62:23:b0:bf:72:6c:ac:ff:d8:
e7:82:35:7e:9c:e7:c0:73:f0:18:17:ba:07:b6:d3:
95:8e:3f:a6:29:49:a4:8a:f7:2a:66:28:91:61:47:
35:22:18:c7:d4:cc:b3:27:57:10:0c:87:cc:4d:cd:
7e:4f:3f:c6:99:c7:a2:85:fe:a8:89:24:4e:5c:52:
ee:a4:46:07:d7:03:82:21:4d:02:a4:57:b7:73:dd:
f2:d1:8f:53:ff:1f:99:39:7b:b4:7a:b8:a5:04:bc:
cf:a9:b5:18:f1:49:c8:2e:f8:32:c5:4f:1f:ad:e6:
5c:af:83:d0:dc:e1:13:70:b6:4e:1b:4f:f4:c5:82:
6f:d4:59:d8:a7:db:2d:4e:71:02:ff:15:97:5e:d7:
34:27:e4:d8:b8:e7:71:b0:60:d4:aa:bd:41:5c:bb:
81:03:54:98:b4:80:00:ff:21:08:c1:a8:4b:d6:34:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:20:36:2B:6C:45:87:EA:E6:83:A4:EA:FE:EE:68:91:26:08:7A
X509v3 Authority Key Identifier:
keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8a:37:0a:c8:e0:62:3c:f6:43:6c:65:84:bf:95:8a:9d:a0:
59:c5:30:4e:92:60:b7:2d:7e:3e:12:41:6c:a4:ad:60:cf:0d:
83:fc:42:13:30:44:a1:c5:5c:af:5f:f2:55:5f:93:75:4f:c7:
f7:9b:23:aa:ef:80:23:7f:1d:4a:f7:25:97:28:e3:96:a2:bf:
f3:1d:01:b9:48:3a:e4:b2:b3:a3:15:c9:85:70:82:ba:90:13:
0f:a9:2a:7b:7f:88:0f:db:28:0c:f8:5c:3f:4f:a0:51:ac:a4:
36:e7:70:df:3b:23:79:6d:4c:a9:76:2b:d8:99:ff:ee:a9:a4:
ed:8c:11:ad:e6:79:00:68:7f:03:0b:76:a9:2e:24:7d:4c:d5:
e3:62:78:c8:d7:9d:85:75:9d:71:22:9f:dc:f7:e5:35:a5:c7:
64:7a:d5:7b:f0:12:f4:2f:c4:52:2f:73:f2:ba:42:2a:69:77:
c3:77:54:81:03:a7:71:9c:6a:95:b7:13:22:e1:20:f8:fa:ce:
a5:de:1d:fc:a8:5b:9b:c6:af:2f:27:d8:84:75:79:8e:64:cf:
2c:db:13:15:5e:7e:0a:8d:76:0d:26:fd:42:2a:68:ad:40:3e:
23:26:a1:e2:08:ab:5f:2d:6f:82:e8:ce:4d:54:1f:51:04:ec:
a3:0f:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:49 2025 by rpki-client on console-fra.rpki-client.org